Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ccaf4e02-9e30-3f29-bf04-4ee0a5e9e204.roa
File:                     ccaf4e02-9e30-3f29-bf04-4ee0a5e9e204.roa (raw, json)
Hash identifier:          WmE3aKhhXp9QtI5JCjrpb7hqRZOtG3jg3qx5E9jKTaY=
Subject key identifier:   74:CD:55:CC:54:73:A2:6E:7B:CB:88:47:7E:7A:42:7E:59:37:89:BD
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F4328584B23318AD47FFEBCEA60333C00
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ccaf4e02-9e30-3f29-bf04-4ee0a5e9e204.roa
Signing time:             Tue 09 Sep 2025 13:00:41 +0000
ROA not before:           Tue 09 Sep 2025 13:00:41 +0000
ROA not after:            Mon 08 Dec 2025 14:00:41 +0000
asID:                     63150
IP address blocks:        68.168.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:31:8a:d4:7f:fe:bc:ea:60:33:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Sep  9 13:00:41 2025 GMT
            Not After : Dec  8 14:00:41 2025 GMT
        Subject: CN=15dc1396-183c-4f15-9a17-61a40404c538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a1:49:82:87:0c:60:c8:3f:21:7e:e4:88:28:
                    e3:b6:8a:8c:7e:ef:9b:1a:26:e9:d2:f9:8e:84:d2:
                    b9:38:1c:98:28:7a:43:cb:5b:a4:23:e0:49:aa:1c:
                    ed:79:6a:6d:8c:39:28:b7:75:fd:f6:7b:39:8f:e2:
                    14:10:47:0d:dd:9b:32:ae:8e:12:7d:71:0b:ce:39:
                    e1:7e:8c:a7:8f:3c:e9:ce:5c:36:01:87:6f:37:8e:
                    b3:f6:77:60:17:d7:72:40:a8:28:ea:d6:40:4e:26:
                    63:5f:c6:fe:e7:f0:d4:ee:f7:3d:e9:ef:78:f9:17:
                    6a:4c:34:69:e9:06:ab:57:8c:ea:da:7f:60:4d:e2:
                    5f:25:24:23:0a:58:b3:ed:5f:d0:a9:de:1f:d8:93:
                    bf:a7:62:45:e7:23:42:28:8f:b8:e5:8a:d4:0f:1f:
                    8d:88:1a:06:9b:53:17:b8:29:d6:2d:b7:d3:78:bb:
                    22:b1:58:50:30:a8:bf:e7:f2:72:26:5d:56:b1:e2:
                    de:0c:f9:31:3d:60:ef:87:4a:1f:6e:90:0e:f5:f1:
                    b5:e7:cf:b3:3d:25:d9:3e:87:64:5c:37:e5:ea:56:
                    b6:64:22:01:64:6c:68:a1:c1:81:15:8e:ae:6f:a6:
                    f0:b1:30:3a:e4:2d:d4:09:3d:f9:9f:48:c9:87:ad:
                    cb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CD:55:CC:54:73:A2:6E:7B:CB:88:47:7E:7A:42:7E:59:37:89:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ccaf4e02-9e30-3f29-bf04-4ee0a5e9e204.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.168.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:ce:ff:71:e0:12:65:89:ba:af:40:1e:eb:6f:01:60:82:6b:
         da:26:03:d0:46:a1:38:15:d2:49:52:f6:bd:e0:6f:fb:72:b7:
         06:20:c9:93:80:f3:13:a1:bf:b1:73:80:60:d2:51:53:7e:ab:
         81:ae:4a:19:1b:b1:82:69:76:22:37:81:95:7e:7c:1e:59:23:
         11:99:a8:9b:d2:6d:08:b2:7f:bc:a1:ef:fe:e6:8d:1e:9d:42:
         60:45:b5:50:51:95:46:27:cd:a7:6f:17:9a:73:3c:0e:d0:39:
         62:43:02:62:02:ba:7b:a6:5c:4f:f7:90:2a:02:fc:56:53:d3:
         cd:6d:91:2a:ba:cc:bb:2a:10:19:3c:6f:c3:3b:47:83:48:06:
         6e:6b:bf:98:90:cb:32:41:5d:ab:36:fb:31:d6:31:4c:1e:2a:
         17:17:1b:fc:40:87:a8:b7:f9:d0:ee:80:aa:c2:b6:44:52:cd:
         af:6e:25:10:7d:6e:67:fe:80:6a:59:b7:db:ef:99:d9:d8:91:
         4b:43:c5:db:d4:5d:c6:40:d2:13:89:94:c7:0e:a8:5e:e5:86:
         5d:82:8c:50:b3:12:2c:7e:43:ca:3f:f2:64:52:d9:d1:2a:71:
         a2:28:50:8a:8f:dc:6a:e9:52:46:c1:73:bc:e9:a1:a2:be:78:
         46:75:e4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:26:16 2025 by rpki-client